Hong Kong’s government has updated infosec guidelines to restrict the use of Chinese messaging app WeChat, alongside Meta and Google products like WhatsApp and Google Drive, on computers it operates.
On Tuesday, secretary for Innovation, Technology and Industry Sun Dong discussed the matter [VIDEO] during an appearance on public broadcasting service Radio Television Hong Kong (RTHK).
Yesterday, Hong Kong's Digital Policy Office posted news of the rule change.
"Although various government departments have deployed multiple cyber security defense measures, the use of end-to-end encryption technology in services such as personal webmail, public cloud storage and instant messaging may circumvent such measures and make it impossible for system administrators to effectively detect potentially malicious links or attachments transmitted by the relevant services," it explained.
The Policy Office added that since the government doesn't control these platforms, tracing transmitted information is challenging. Their technical features hinder efforts to detect and respond to malicious activities, increasing the risk of information leaks.
Local media reported that minister Sun said inspiration for the regulations came from similar actions taken by the US and mainland China, plus serious data security incidents over the last year.
The restrictions go into effect at the end of October. Exceptions to the ban are available in some instances, with approval from department heads.
- EU tries to pin down China on definition of 'important data'
- China makes it even harder for data to leave its shores
- Google gives in to Hong Kong, blocks fake national anthem on YouTube
- Hong Kong becomes major hub for shipping banned tech to Iran, Russia
Hong Kong is technically a part of China – even if under a "one country, two systems" framework. The Middle Kingdom usually differentiates between products made in the West and homegrown ones like Tencent's WeChat. It views the latter as more secure, partly because of a requirement to store data domestically.
Beijing likes to nourish homegrown tech while keeping its developers under its thumb. But this time, China – or at least its Special Administrative Region – sees Tencent’s service as a security threat.
Hong Kong's legislature is projected to table a new cyber security law by the end of the year, which is expected to cover critical infrastructure computer systems. ®